Voor KPN is Harvey Nash op zoek naar een Senior Network & Security Automation Engineer
Startdatum: z.s.m.
Einddatum: 31-12-2026 (word hierna verlengd)
Locatie: Amersfoort
Aantal uur: 40uur per week
The Networks & Datacenter (NW&DC) organization within Platform & Technology (P&T) forms the foundation of ABN AMRO's IT landscape. We provide secure, scalable and resilient infrastructure services that support thousands of applications, users and business-critical processes.
As cyber threats increasingly hide within encrypted traffic, we are improving network security inspection. We are looking for an experienced Security Engineer who combines deep technical expertise with strong automation capabilities and a security-by-design mindset.
You will play a key role in designing, implementing and operating next-generation network security solutions while helping the organization move towards highly automated and policy-driven security services.
Your role
As a Senior Network & Security Engineer, you will be responsible for the implementation, integration and operational support of security platforms that protect ABN AMRO against advanced cyber threats.
You will work within a team of highly skilled engineers responsible for:
- TLS/SSL Traffic Inspection solutions
- Advanced Threat Protection implementation
- Network security architecture and engineering
- Security automation and Infrastructure as Code
- Secure access and traffic governance
- Operational support and continuous improvement
You will act as a subject matter expert and hands-on engineer, bridging architecture, engineering, operations and security processes.
What you will do
Security Engineering
- Design, implement and optimize TLS/SSL traffic inspection solutions.
- Deploy and manage Advanced Threat Protection capabilities to identify malicious encrypted traffic.
- Engineer and maintain enterprise-scale security environments.
- Support secure network segmentation and security policy enforcement.
- Perform troubleshooting, root cause analysis and lifecycle management of security platforms.
- Participate in security incident investigations and remediation activities.
Platform Engineering
- Configure and manage:
- Palo Alto Next Generation Firewalls
- Palo Alto Panorama
- F5 BIG-IP platforms
- Cisco networking and security technologies
- Maintain secure and highly available network security services.
- Implement changes in accordance with security and operational governance processes.
Automation & DevSecOps
- Develop automation solutions using:
- Python
- Ansible
- REST APIs
- Git
- YAML
- Infrastructure as Code principles
- Automate security policy deployment and compliance validation.
- Contribute to CI/CD integrations for network and security services.
- Develop reporting, monitoring and operational dashboards.
Security Governance & Process
- Support security audits, compliance activities and control validation.
- Contribute to implementation of security standards and best practices.
- Ensure solutions comply with regulatory requirements including DORA and internal security policies.
- Improve operational processes through automation and standardization.
Your profile
You are an experienced hands-on engineer with a passion for security engineering, automation and protecting critical banking infrastructure.
Required Experience
- 5+ years of experience as a Network Security Engineer or Security Engineer.
- Proven hands-on experience with:
- Palo Alto Networks NGFW
- Palo Alto Panorama
- F5 BIG-IP
- Cisco networking infrastructure
- Experience implementing TLS/SSL inspection solutions.
- Experience with Advanced Threat Protection technologies.
- Strong understanding of:
- Network security architectures
- Routing and switching
- Load balancing
- Proxy technologies
- Network segmentation
- Security policy management
- Experience working within regulated enterprise environments.
Automation Skills
- Practical experience with:
- Python
- Ansible
- API integrations
- Git
- Infrastructure as Code
- Ability to automate operational and security processes.
Certifications
One or more of the following certifications or equivalent:
- Palo Alto Networks Certified Network Security Engineer (PCNSE)
- Palo Alto Networks Certified Cybersecurity Associate (PCCSA)
- Cisco CCNP Security
- Cisco CCIE Security
- F5 Certified BIG-IP Administrator (201)
- Equivalent industry-recognized security certifications